What shipped
The complete local workflow includes:
- Strict two-file intake with bounded parsing and duplicate-key rejection
- Recursive deterministic redaction using six detectors and declared literals
- A canonical, one-record-per-line cassette
- All 16 closed anomaly codes
- Seven derived artifacts plus a manifest
- An inert, self-contained replay served only on loopback
- Staged, atomic publication and bundle replacement
- Workspace regeneration and portable bundle validation
- Fictional and clean fixtures, adversarial tests, and service handoff documents
Architecture
- Standard-library modules separate intake, envelope rules, redaction, invariant evaluation, rendering, publication, validation, bundling, and serving.
- Raw values stay on the shortest in-memory path. Only sanitized values reach candidate artifacts.
- One immutable result model feeds every renderer. Validation independently reparses the outputs and checks their relationships.
- Canonical JSON and NDJSON, fixed-header LF CSV, deterministic Markdown and HTML, supplied timestamps, and SHA-256 bindings prevent environmental drift.
- Candidate directories are scanned and validated before atomic replacement, preserving the last known good output after a failure.
- The replay embeds sanitized data, writes it through text-only DOM APIs, includes no external assets or request primitives, and exposes no action controls.
Limitations
> **Human interpretation is required.** Findings identify violations of documented invariants; they do not establish root cause.
- A supplied stream may be incomplete, inauthentic, unsafe, or incompatible with a broader agent platform.
- Redaction covers a fixed detector list and declared literals, not every possible secret.
- Bundle-only validation has no raw inputs, so it cannot prove source equivalence or removal of undeclared literals.
Suggested next steps
Use the fictional session for a human walkthrough. Then test the fixed $1,500 USD upfront debugging sprint with exactly three qualified, Michael-approved offers.
Keep expansion frozen until either one sprint is paid or one qualified team supplies an authentic, authorized, sanitized stream that maps to 0.1. Treat a real mapping example as the next possible increment; live adapters, hosting, broader schemas, and licensing remain outside the current scope.